Unrated severityNVD Advisory· Published Dec 19, 2025· Updated Feb 24, 2026

TOTOLINK T10 cstecgi.cgi sprintf stack-based overflow

CVE-2025-14964

Description

A vulnerability has been found in TOTOLINK T10 4.1.8cu.5083_B20200521. This affects the function sprintf of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument loginAuthUrl leads to stack-based buffer overflow. The attack may be performed from remote.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Totolink/T10 Firmwarev5
cpe:2.3:o:totolink:t10_firmware:*:*:*:*:*:*:*:*
Range: 4.1.8cu.5083_B20200521
Totolink/T10llm-create
Range: = 4.1.8cu.5083_B20200521

Patches

Vulnerability mechanics

References

vuldb.commitrethird-party-advisory
github.com/JackWesleyy/CVE/blob/main/TOTOLINK_T10_BOC.mdmitrerelated
vuldb.commitresignaturepermissions-required
vuldb.commitrevdb-entrytechnical-description
www.totolink.netmitreproduct

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000